Skip to content

[MS-43510] remediate tomcat vulnerability

VidyaDharani Lokam requested to merge az/vl-update-corelibazurespring6 into master
  • update spring-boot version to 3.3.1 to remediate tomcat vulnerability.
  • update core-lib-azure-spring6 to 0.27.0-rc3 .

mvn dependency:tree before changes:

[INFO] +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.20:compile
[INFO] |  \- org.apache.tomcat:tomcat-annotations-api:jar:10.1.20:compile
[INFO] +- org.springframework.boot:spring-boot-starter-web:jar:3.2.5:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter:jar:3.2.5:compile

mvn dependency:tree after changes:

[INFO] +- org.apache.tomcat.embed:tomcat-embed-core:jar:10.1.25:compile
[INFO] |  \- org.apache.tomcat:tomcat-annotations-api:jar:10.1.25:compile
[INFO] +- org.springframework.boot:spring-boot-starter-web:jar:3.3.1:compile
[INFO] |  +- org.springframework.boot:spring-boot-starter:jar:3.3.1:compile
Edited by VidyaDharani Lokam

Merge request reports